Red Hat Security AdvisoryRHSA-2026:69542
redis:6 security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) redis-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.src::redis:6, redis-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.x86_64::redis:6, redis-devel-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.x86_64::redis:6 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) redis-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.aarch64::redis:6, redis-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.ppc64le::redis:6, redis-6.0.9-5.module+el8.4.0+24914+3cb9e211.7.s390x::redis:6 +7
Fixes 2 records
Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
